Privacy Policy

Last updated: October 25, 2026

Who we are

This service is operated by FounderSync ("FounderSync", "we", "us"). FounderSync is the data controller responsible for personal data processed through foundersync.co.in. You can reach us at hello@foundersync.co.in.

What we collect

• Account data: your email address and authentication identifiers (e.g. Google sign-in ID).
• Assessment content: the answers you and your co-founder submit, and the reports generated from them.
• Payment data: processed by Dodo Payments, our Merchant of Record. We receive transaction metadata (order ID, amount, country) but never see your full card details.
• Technical data: IP address, device/browser info, and basic usage logs for security and reliability.

Why we process it and legal basis

• To provide the service (create account, run assessment, generate report) — performance of a contract.
• To process payments and issue invoices via Dodo Payments — performance of a contract and legal obligation.
• To secure the service (fraud/abuse prevention, logs) — legitimate interests.
• To send transactional email (report-ready notifications) — performance of a contract.
• To send occasional product updates, only where you have opted in — consent.

What is private, and what is shared?

In the product, each founder can view only their own raw responses. The other founder can see progress counts, not the text of those responses. When both founders finish, both sets of responses are processed to create one shared report that both participating founders can access.

The report contains summaries, observations, and discussion questions derived from both sets of responses. Your shared report may reveal differences in expectations even when it does not reproduce your original answers.

AI processing

Founder names and both founders' written responses are sent through Lovable AI Gateway to an underlying large language model to generate the shared report. The generated report may miss context or misinterpret an answer; both founders should review and correct its observations together. We do not currently use a human-review step as part of the standard report workflow.

Who we share data with

• Dodo Payments — Merchant of Record for payments, tax compliance, and invoicing.
• Supabase — database, authentication, and file storage hosting.
• Lovable AI Gateway — routes report-generation prompts to the underlying LLM provider.
• Resend — sends transactional email (e.g. report-ready notifications).
• Google — if you sign in with Google.
• PostHog — consented product analytics.
• Meta (Facebook and Instagram) — advertising measurement, when enabled and permitted by your separate advertising choice and applicable privacy signals. Setup is currently being verified; no Meta tracking is active yet.
• Authorities — where required by law.

Access and security

Access rules restrict raw responses to the founder who wrote them and restrict the shared report to the two founders linked to that assessment. Server-side report generation is authorized to retrieve both sets of responses for processing. No system is perfectly secure.

FounderSync does not provide a staff-facing response viewer in the current administrator interface. That does not mean the underlying data is inaccessible to authorized operations: FounderSync personnel with authorized infrastructure access may be able to access stored data when needed to operate, support, or secure the service.

Retention

Responses and reports remain stored with your account unless a deletion request is handled. To request deletion, email hello@foundersync.co.in. Some payment, transaction, or legal records may need to be retained. FounderSync does not currently provide self-service deletion in the app.

Your rights

Subject to applicable law, you may request access to, correction of, deletion of, or export of your personal data, and object to or restrict certain processing. Email hello@foundersync.co.in to make a request.

Cookies

We use essential storage for authentication and session management. Optional product analytics requires your analytics choice. Advertising measurement is a separate choice: a regional notice is shown where consent is required, or when location cannot be determined. Elsewhere, permitted advertising measurement may run without a notice, but an explicit refusal or browser privacy opt-out takes precedence.

Meta measurement, once enabled, may share IP address, browser/device information, cookie identifiers and generic page or completion events for ad measurement and optimization. Assessment answers, quick-check selections, financial expectations and report findings are not sent to Meta. No email or account matching is included in this setup.

Use Cookie settings in the footer to change or withdraw choices at any time. Opening settings does not change your existing choice. Advertising choice records include a random browser reference, time, country when known, and the notice version and wording; previous acceptance is retained when you withdraw. Choices are stored in this browser (session-only if storage is unavailable). Withdrawal affects future measurement, not information already received by a provider. For advertising measurement, a quick-check completion counts once only when the results open with all three answer-and-guess pairs selected; opening results with blanks does not count. Our separate product analytics may still record that results were viewed. A quick-check completion is not evidence of a completed assessment or partnership compatibility.

Contact

Questions? Email hello@foundersync.co.in.